malwaredllc/byob

malwaredllc/byob

GitHubGitHub
GitHubgithub.com
byob.devbyob.dev
Releases1
Frequency
Last Release
Stars9.47K
An open-source post-exploitation framework for students, researchers and developers.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-45257↗
7.3 HIGH—

A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter. This occurs in freeze in core/generators.py.

CVE-2024-45256↗
9.8 CRITICAL—

An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in file_add in api/files/routes.py.